Legal

Privacy Policy Agreement

Effective Date: December 17, 2025

1. INTRODUCTION

This Privacy Policy ("Policy") governs the collection, use, storage, and disclosure of information obtained from users ("Users") of Moonlight and its related services. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy. If you identify any misrepresentations or inaccuracies in this Policy, please promptly notify us at [email protected].

2. INFORMATION COLLECTION

We collect and process the following categories of data:

2.1. User Identifiers: User IDs, usernames, nicknames, and avatars;

2.2. Guild Information: Guild IDs, Guild names, and server configurations;

2.3. Communication Data: Channel IDs, Role IDs, Message IDs, and message timestamps;

2.4. Command Arguments: Information provided as arguments when executing commands;

2.5. Linked Account Data: Last.fm usernames, Spotify OAuth tokens (access & refresh), and social media usernames (Instagram, Twitter, etc.) if you choose to link them;

2.6. Optional Personal Data: Birthday, location, and relationship information if you choose to provide it;

2.7. Economy & Gaming Data: Virtual currency balances, XP levels, inventory, and game statistics;

2.8. Moderation Data: Warning records, jail/timeout records, blacklist/whitelist entries, and filter configurations;

2.9. Historical Data: Last deleted message content (maximum of ten (10) entries per channel, retained in memory only until bot restart) and message edit history (same retention policy).

3. PURPOSE OF DATA COLLECTION AND PROCESSING

3.1. We collect and process User data solely for legitimate operational purposes, including but not limited to:

a) Facilitating command execution and system functionality;

b) Debugging and technical maintenance;

c) Supporting specific features, such as music tracking (Last.fm/Spotify integration), social media subscriptions, economy systems, and moderation tools;

d) Processing payments through Stripe for premium subscriptions;

e) Data aggregation for system operation and functionality improvement.

3.2. All data collected is maintained in accordance with the retention periods specified in Section 2.

4. THIRD-PARTY SERVICES

4.1. We integrate with the following third-party services to provide functionality:

a) Stripe — for secure payment processing;

b) Last.fm — for music tracking features;

c) Spotify — for music playback and integration features;

d) Discord — as the platform we operate on;

e) Instagram/Twitter/TikTok — for social media subscription notifications.

4.2. OAuth tokens (such as Spotify tokens) are stored securely with encryption and are used solely for authentication purposes.

5. THIRD-PARTY DISCLOSURE

5.1. We do not sell, trade, rent, or otherwise transfer User information to external parties or third-party entities for marketing purposes.

5.2. We reserve the right to disclose information as required by law or to comply with legal processes.

6. DATA SUBJECT RIGHTS

6.1. Right to Erasure: Users may request deletion of their personal data by submitting a written request to [email protected] or through our Discord support server. Such requests must:

a) Specifically identify the information to be deleted;

b) Provide sufficient evidence of account ownership; and

c) Allow for processing time of up to fourteen (14) days.

6.2. Right to Access: Users may request access to all data currently being stored about them by submitting a written request to [email protected]. Response time may extend up to seven (7) days from receipt of request.

6.3. Self-Service Data Management: Users may independently manage certain data through bot commands, including unlinking connected accounts (Last.fm, Spotify, social media), clearing personal preferences, and resetting economy data.

6.4. Automatic Deletion: When Moonlight is removed from a server, all server-specific data is queued for deletion and permanently removed within thirty (30) days.

7. DATA SECURITY

7.1. We implement industry-standard security measures to protect your data, including:

a) Encrypted data transmission;

b) Secure database storage with access controls;

c) OAuth token encryption;

d) Limited staff access on a need-to-know basis.

7.2. Temporary message data (snipe feature) is stored only in memory (RAM) and is not persisted to disk. This data is automatically cleared on bot restart.

8. CHILDREN'S PRIVACY

8.1. Moonlight is intended for users who meet Discord's minimum age requirements (13 years or older, or the minimum age in your jurisdiction).

8.2. We do not knowingly collect information from children under these age limits. If you believe we have collected data from a minor, please contact us immediately.

9. POLICY AMENDMENTS

9.1. We reserve the right to modify, amend, or update this Policy at any time without prior notice to Users.

9.2. Continued use of our services following any modifications to this Policy constitutes acceptance of such changes.

9.3. Violations of our Terms of Service, including this Privacy Policy, may result in permanent termination of access to all services we provide.

10. CONTACT INFORMATION

For questions or concerns regarding this Privacy Policy, please contact us at: